Cybersecurity Compliance (CMMC Level 2)

The contract requires the implementation and self-assessment of Cybersecurity Maturity Model Certification (CMMC) Level 2 controls to safeguard covered defense information in alignment with DFARS requirements and NIST SP 800-171 security standards. This subcontract is focused on ensuring that all necessary technical and administrative safeguards are in place to protect sensitive federal information systems and data, with the contractor responsible for achieving full compliance through documented processes, policies, and technical controls. The self-assessment must demonstrate that all 110 controls required for CMMC Level 2 have been properly implemented and are effectively maintained, with evidence available for audit or review. The solicitation is open for responses until August 13, 2026, and is issued under the NAICS code 541512 for computer systems design services by DLA Land and Maritime, a branch of the Department of Defense. As a subcontract, the work must be performed in support of a prime contractor or larger defense initiative, and the place of performance details are unspecified but must comply with federal cybersecurity mandates. Contractors must具备 the capability to conduct internal assessments, maintain compliance documentation, and adapt to evolving defense cybersecurity expectations to meet the stringent requirements of CMMC Level 2 without third-party certification at this stage.